#741 SessionHandler::gc() permission denied

[Mark Grimshaw]

On a fresh install, on the superadmin page after the database tables have been created, I get this message:
Notice: SessionHandler::gc(): ps_files_cleanup_dir: opendir(/tmp) failed: Permission denied (13) in /home/wikindx/www/srg/core/startup/UPDATEDATABASE.php on line 62

[Stéphane Aulery]

Hi Mark,

The session folder of your php.ini is not well defined. Session files should not be stored in /tmp but a folder dedicated to the current vhost. Thus, the files can be accessed via the web server account. Warning : if you intend to change this you need one vhost by website and one PHP FPM configuration by website.

And we cannot change the path for <wikindx_root>/cache/sessions because this is a big security hole.</wikindx_root>

The best thing I can do is nothing. Otherwise, I can block recycling session during the installation. A less serious security issue.

Regards,

[Mark Grimshaw]

OK. Let's leave it.